# Clawsec Suite

ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature...

- Repository: https://github.com/prompt-security/clawsec (1129 stars)
- Category: Security
- License: AGPL-3.0
- Last updated: 2026-11-01
- Runs scripts: yes, review before use

## Install

Claude Code: `npx skills add prompt-security/clawsec --skill clawsec-suite -g -a claude-code -y`
Codex: `npx skills add prompt-security/clawsec --skill clawsec-suite -g -a codex -y`
Cursor: `npx skills add prompt-security/clawsec --skill clawsec-suite -g -a cursor -y`
Gemini CLI: `npx skills add prompt-security/clawsec --skill clawsec-suite -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add prompt-security/clawsec`

## Description

ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# ClawSec Suite

## Vercel Skills Installation

Install with the Vercel Skills CLI for this harness:

```bash
npx skills add prompt-security/clawsec --skill clawsec-suite -a openclaw -y
```

## Operational Notes

- Required runtime: `node`, `npx`, `openclaw`, `curl`, `jq`, `shasum`, `openssl`, `unzip`
- Side effects: setup scripts install an advisory hook under `~/.openclaw/hooks`, optionally create an unattended `openclaw cron` job, and use `npx clawhub@latest install` for guarded installs
- Network behavior: fetches signed advisory feed artifacts and remote catalog metadata unless you pin local paths
- Trust model: the suite can recommend removal or block risky installs, but removal/install overrides stay approval-gated

This means `clawsec-suite` can:
- monitor the ClawSec advisory feed,
- track which advisories are new since last check,
- cross-reference advisories against locally installed skills,
- recommend removal for malicious-skill advisories and require explicit user approval first,
- and still act as the setup/management entrypoint for other ClawSec protections.

## Included vs Optional Protections

### Built into clawsec-suite
- Embedded signed advisory trust set: `advisories/feed.json`, `feed.json.sig`, `checksums.json`, `checksums.json.sig`, and `feed-signing-public.pem`
- Portable heartbeat workflow in `HEARTBEAT.md`
- Advisory polling + state tracking + affected-skill checks
- OpenClaw advisory guardian hook package: `hooks/clawsec-advisory-guardian/`
- Setup scripts for hook and optional cron scheduling: `scripts/`
- Guarded installer: `scripts/guarded_skill_install.mjs`
- Dynamic catalog discovery for installable skills: `scripts/discover_skill_catalog.mjs`

### Installed separately (dynamic catalog)
`clawsec-suite` does not hard-code add-on skill names in this document.

Discover the current catalog from the authoritative index (`https://clawsec.prompt.security/skills/index.json`) at runtime:

The rest: https://github.com/prompt-security/clawsec/blob/HEAD/skills/clawsec-suite/SKILL.md